janl/mustache.js — pull request #199 by cweider (2012-04-10 23:15:45+00:00)
Title: Strict escape II

This replaces the soft escaping (`&` -> `&`) with strict escaping (`&` -> `&amp;`). This new behavior matches that of Ruby and other Mustache implementations.

Other points:
- `dot_notation` currency is changed to use an ASCII character, since the JS interpreters did not appreciate unicode.
- Forward slash is added to escape list c/o OWASP recommendations.

*Note:* This does change behavior in an arguably non-backward compatible way.

See also #183.